Project-Field-Analysis-and-Memory-Leak-Demonstration

Objective The objective of this project was to assess a remote host for the Heartbleed vulnerability CVE-2014-0160, verify its presence, and exploit it to extract potentially sensitive information from server memory over the TLS protocol. Execution 1. Identifying Open Services Nmap nmap -sC -sV...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL TimeStamp Response type confusion PoC Crash-only laboratory reproducer for CVE-2025-69420 in OpenSSL. The PoC loads a valid RFC 3161 TimeStamp Response, changes the signed ESS attribute from VASN1SEQUENCE to VASN1NULL in memory, and calls TSRESPverifyresponse. On an...

MGASA-2026-0481 Updated openssl package fixes security vulnerabilities

DTLS Retransmits Handshake Messages From a Stale Buffer Offset. CVE-2026-84782 Excessive Memory Allocation in Relative CRLDP Processing. CVE-2026-35189 QUIC Unvalidated Amplification Credit may be Over Accounted. CVE-2026-35191 Potential CPU DoS via On^2 Fragment Reassembly in QUIC. CVE-2026-4277...

Updated openssl package fixes security vulnerabilities

DTLS Retransmits Handshake Messages From a Stale Buffer Offset. CVE-2026-84782 Excessive Memory Allocation in Relative CRLDP Processing. CVE-2026-35189 QUIC Unvalidated Amplification Credit may be Over Accounted. CVE-2026-35191 Potential CPU DoS via On^2 Fragment Reassembly in QUIC. CVE-2026-4277...

Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak System

Summary Multiple vulnerabilities were found in linux kernel, libssh expat, libssh, openSSL in Platform System Manager PSM OS Image for Red Hat Enterprise Linux v8 shipped with IBM Cloud Pak System. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...

PoC-CVE-2025-69419

CVE-2025-69419 – OpenSSL Heap Buffer Overflow Reproducer Overview This repository contains a minimal proof-of-concept reproducer for CVE-2025-69419 affecting vulnerable versions of OpenSSL. The PoC demonstrates the heap out-of-bounds write reported for PKCS12getfriendlyname when processing a...

PoC-CVE-2025-69421

Repositorio de solo caída CVE-2025-69421 Este repositorio contiene un archivo PKCS12 malformado mínimo que reproduce el CVE-2025-69421 en un entorno de laboratorio aislado. El PFX generado contiene EncryptedData cuyo EncryptedContentInfo omite el campo opcional encryptedContent. Las versiones...

openssl security update

An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

RLSA-2026:77396 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 For...

Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.

Summary Vulnerabilities in OpenSSL could cause excessive memory consumption CVE-2026-54874, heap buffer overflow CVE-2026-63072, indefinite cache growth leading to denial of service CVE-2026-63074, invalid pointer dereference CVE-2026-63076, and authentication forgery CVE-2026-75803. OpenSSL is...

K000163617: OpenSSL vulnerabilities CVE-2026-63072, CVE-2026-63073 and CVE-2026-63074

Security Advisory Description CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap writ...

ROOT-OS-DEBIAN-12-CVE-2026-84782 CVE-2026-84782 in openssl - Patched by Root

Root has patched CVE-2026-84782 in the openssl package for Root:Debian:12. Multiple fixed versions available...

HMAC_Bruteforcer

HMACBruteforcer Very Slow HMAC Key Bruteforcer Implemented in Bash Uses: OpenSSL Crunch Optional...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4560-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4560-1 advisory. This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

Rocky Linux 10.2 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc (crlsa-2026_76918)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676918 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...

AlmaLinux 10 : openssl (ALSA-2026:76918)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:76918 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...

AlmaLinux 9 : openssl (ALSA-2026:77396)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:77396 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block...

The vulnerability in the TLS and SSL OpenSSL library’s tools, related to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the TLS and SSL OpenSSL library’s tools, related to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the TLS and SSL OpenSSL library’s tools, related to the use of memory after it is freed, allows attackers to gain unauthorized access to protected information.

The vulnerability of TLS and SSL OpenSSL tools is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...